Merge pull request #27 Phase-1-Security Enhancements

Phase-1-Security Enhancements

Author: xnodeoncode

.gitignore

@@ -32,3 +32,6 @@ publish_profile.xml
 .venv/
 
 obj/
+
+# VS Code user-specific settings (keep launch.json and tasks.json)
+.vscode/settings.json

0-Aquiis.Core/Constants/ApplicationSettings.cs

@@ -3,13 +3,19 @@ namespace Aquiis.Core.Constants
     public class ApplicationSettings
     {
         public string AppName { get; set; } = string.Empty;
+        public string ProductName { get; set; } = string.Empty;
         public string Version { get; set; } = string.Empty;
         public string Author { get; set; } = string.Empty;
         public string Email { get; set; } = string.Empty;
         public string Repository { get; set; } = string.Empty;
+        public string DatabaseFileName { get; set; } = string.Empty;
+        public string PreviousDatabaseFileName { get; set; } = string.Empty;
         public bool SoftDeleteEnabled { get; set; }
-        public string SchemaVersion { get; set; } = "1.0.0";
+        public string SchemaVersion { get; set; } = string.Empty;
         public int MaxOrganizationUsers { get; set; } = 0; // 0 = unlimited (Professional), 3 = SimpleStart limit
+        public string License { get; set; } = string.Empty;
+        public string LicenseUrl { get; set; } = string.Empty;
+        public string HelpUrl { get; set; } = string.Empty;
     }
 
     // Property & Tenant Lifecycle Enums

0-Aquiis.Core/Entities/ApplicationScreening.cs

@@ -6,10 +6,6 @@ namespace Aquiis.Core.Entities
 {
     public class ApplicationScreening : BaseModel
     {
-        [RequiredGuid]
-        [Display(Name = "Organization ID")]
-        public Guid OrganizationId { get; set; } = Guid.Empty;
-
         [RequiredGuid]
         [Display(Name = "Rental Application")]
         public Guid RentalApplicationId { get; set; }

0-Aquiis.Core/Entities/BaseModel.cs

@@ -2,6 +2,7 @@
 using System.ComponentModel.DataAnnotations.Schema;
 using System.Text.Json.Serialization;
 using Aquiis.Core.Interfaces;
+using Aquiis.Core.Validation;
 
 namespace Aquiis.Core.Entities
 {
@@ -12,6 +13,15 @@ public class BaseModel : IAuditable
         [DatabaseGenerated(DatabaseGeneratedOption.None)]
         public Guid Id { get; set; }
 
+        /// <summary>
+        /// Organization partition key - all entities are scoped to an organization for multi-tenancy.
+        /// This is the fundamental isolation boundary in the system.
+        /// </summary>
+        [RequiredGuid]
+        [JsonInclude]
+        [Display(Name = "Organization ID")]
+        public Guid OrganizationId { get; set; } = Guid.Empty;
+
         [Required]
         [JsonInclude]
         [DataType(DataType.DateTime)]
@@ -39,5 +49,9 @@ public class BaseModel : IAuditable
         [JsonInclude]
         [Display(Name = "Is Deleted?")]
         public bool IsDeleted { get; set; } = false;
+
+        [JsonInclude]
+        [Display(Name = "Is Sample Data?")]
+        public bool IsSampleData { get; set; } = false;
     }
 }

0-Aquiis.Core/Entities/CalendarEvent.cs

@@ -10,10 +10,6 @@ namespace Aquiis.Core.Entities
     /// </summary>
     public class CalendarEvent : BaseModel
     {
-        [RequiredGuid]
-        [Display(Name = "Organization ID")]
-        public Guid OrganizationId { get; set; } = Guid.Empty;
-
         [Required]
         [StringLength(200)]
         [Display(Name = "Title")]

0-Aquiis.Core/Entities/CalendarSettings.cs

@@ -5,9 +5,6 @@ namespace Aquiis.Core.Entities;
 
 public class CalendarSettings : BaseModel
 {
-    [RequiredGuid]
-    [Display(Name = "Organization ID")]
-    public Guid OrganizationId { get; set; } = Guid.Empty;
     public string EntityType { get; set; } = string.Empty;
     public bool AutoCreateEvents { get; set; } = true;
     public bool ShowOnCalendar { get; set; } = true;

0-Aquiis.Core/Entities/Checklist.cs

@@ -6,10 +6,6 @@ namespace Aquiis.Core.Entities
 {
     public class Checklist : BaseModel
     {
-        [RequiredGuid]
-        [Display(Name = "Organization ID")]
-        public Guid OrganizationId { get; set; } = Guid.Empty;
-
         [Display(Name = "Property ID")]
         public Guid? PropertyId { get; set; }
 

0-Aquiis.Core/Entities/ChecklistItem.cs

@@ -6,11 +6,6 @@ namespace Aquiis.Core.Entities
 {
     public class ChecklistItem : BaseModel
     {
-
-        [RequiredGuid]
-        [Display(Name = "Organization ID")]
-        public Guid OrganizationId { get; set; } = Guid.Empty;
-
         [RequiredGuid]
         [Display(Name = "Checklist ID")]
         public Guid ChecklistId { get; set; }

0-Aquiis.Core/Entities/ChecklistTemplate.cs

@@ -5,10 +5,6 @@ namespace Aquiis.Core.Entities
 {
     public class ChecklistTemplate : BaseModel
     {
-        [RequiredGuid]
-        [Display(Name = "Organization ID")]
-        public Guid OrganizationId { get; set; } = Guid.Empty;
-
         [Required]
         [StringLength(100)]
         [Display(Name = "Template Name")]

0-Aquiis.Core/Entities/ChecklistTemplateItem.cs

@@ -6,10 +6,6 @@ namespace Aquiis.Core.Entities
 {
     public class ChecklistTemplateItem : BaseModel
     {
-        [RequiredGuid]
-        [Display(Name = "Organization ID")]
-        public Guid OrganizationId { get; set; } = Guid.Empty;
-
         [RequiredGuid]
         [Display(Name = "Checklist Template ID")]
         public Guid ChecklistTemplateId { get; set; }